This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa
File:                     fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (raw, json)
Hash identifier:          N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=
Subject key identifier:   7C:95:B3:86:2C:FA:6B:26:2C:A8:CF:24:CE:C4:44:62:D2:09:06:02
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019B7C129DE0829BE213C61C9CB7BF3DE28F
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa
Signing time:             Fri 02 Jan 2026 00:19:13 +0000
ROA not before:           Fri 02 Jan 2026 00:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39007
IP address blocks:        82.135.160.0/21 maxlen: 21
                          212.59.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:9d:e0:82:9b:e2:13:c6:1c:9c:b7:bf:3d:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Jan  2 00:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c95b3862cfa6b262ca8cf24cec44462d2090602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:99:68:f7:ab:e2:b9:a5:a3:78:ba:55:21:
                    83:41:02:2a:a2:85:8e:e5:95:8a:bc:8d:da:5b:9f:
                    a9:13:7d:2e:e4:e6:bc:46:d4:88:7e:67:05:5f:43:
                    4d:68:66:98:da:64:b2:f2:a2:19:71:1a:fc:6b:eb:
                    94:c0:83:d2:6c:7c:e8:9c:98:be:c8:30:13:4f:12:
                    d0:91:01:ab:8c:c4:d5:ac:1c:93:d4:42:58:91:d1:
                    e0:08:54:de:21:78:8a:01:d8:66:cb:19:af:ed:fe:
                    16:62:89:25:af:49:78:fe:32:9e:21:47:9a:31:f1:
                    c5:5c:35:37:76:15:85:00:29:57:a9:ac:bf:f6:83:
                    0e:52:cd:2c:c0:1f:60:52:28:a5:73:39:f1:c4:b1:
                    28:f4:69:3f:8e:3b:a3:b0:6b:ef:8a:86:18:c2:ab:
                    dc:fe:bb:2e:1f:6f:09:8b:9e:a1:3f:cc:77:9e:2c:
                    18:57:1e:3d:7c:34:4e:71:da:18:17:d5:f3:c0:15:
                    11:52:77:33:a1:c2:22:f0:d8:3b:4b:1f:e1:1e:65:
                    ab:27:da:11:03:ec:6f:a0:a0:49:da:36:d1:a0:dc:
                    92:df:c1:aa:27:ff:3c:ce:aa:fc:2f:d2:e3:3a:06:
                    98:85:3d:bb:e6:ae:4b:a7:ae:01:93:4b:9c:1e:12:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:95:B3:86:2C:FA:6B:26:2C:A8:CF:24:CE:C4:44:62:D2:09:06:02
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/fJWzhiz6ayYsqM8kzsREYtIJBgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.135.160.0/21
                  212.59.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:a2:e1:70:46:10:3e:86:3d:29:f6:4a:20:9f:cf:cf:81:
         c4:da:5f:68:d1:ba:38:df:ec:41:3f:a8:76:10:c0:e5:42:04:
         82:9f:c9:e7:c1:ef:9b:85:63:ca:4e:64:c4:ab:5e:cc:8a:c0:
         aa:d7:7f:60:a5:6a:ab:7a:c2:27:e9:bd:bf:cf:70:e2:f3:ed:
         f6:10:45:13:2f:03:5b:df:80:d6:63:b0:02:5d:69:9a:8f:8d:
         db:95:bd:27:09:9f:3f:85:5a:61:fa:2f:be:8e:0b:0c:88:b7:
         93:de:47:66:9d:32:9f:be:77:9a:90:2e:a4:98:58:c4:f5:c6:
         62:01:fb:73:db:89:01:08:25:19:55:65:1f:c7:5d:e4:41:11:
         54:73:27:29:b8:fc:09:52:a3:e9:cf:58:1f:51:ed:87:82:b4:
         45:22:17:7c:cd:01:4b:e0:0e:12:63:8a:20:d3:0a:ac:6c:79:
         0d:3d:65:9d:0d:00:9c:d2:1a:71:f2:6f:66:9e:ac:aa:5f:77:
         8e:1c:f2:30:40:d3:58:fb:bb:7f:b2:20:08:f9:76:9a:55:b6:
         84:53:81:9b:80:6d:49:c7:24:1f:6b:12:f8:7f:dc:b9:39:ce:
         60:21:a1:28:f8:4f:ef:95:25:36:b3:23:8a:71:e0:82:9e:d3:
         6e:6d:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:15 2026 by rpki-client